Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.mft
File:                     n6TechyAssnnbOAVqErHDv_F7YY.mft (raw, json)
Hash identifier:          okbDL0Z4scOBOFiQFnGdGSP2HTNQ23gI5lMj1kkkEzc=
Subject key identifier:   DD:99:DF:EF:42:4D:15:BF:2D:CC:2F:8A:DE:FA:5F:40:9D:EE:EA:B9
Authority key identifier: 9F:A4:DE:72:1C:80:B2:C9:E7:6C:E0:15:A8:4A:C7:0E:FF:C5:ED:86
Certificate issuer:       /CN=9fa4de721c80b2c9e76ce015a84ac70effc5ed86
Certificate serial:       019D27725084477D13C810F79386814969CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.mft
Manifest number:          067C
Signing time:             Thu 26 Mar 2026 00:01:36 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:36 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:36 +0000
Files and hashes:         1: JM6GKQftlnRZxpBKt8Qp5u-DSws.roa (hash: wuuHv8GFSYvD4TiRpQntr79G5SD1rNYlmVrdlTMzxqc=)
                          2: n6TechyAssnnbOAVqErHDv_F7YY.crl (hash: d2oHErRNjh44ZdZB8zgOv+xoEXwebEonBSk8/haMMzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:50:84:47:7d:13:c8:10:f7:93:86:81:49:69:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa4de721c80b2c9e76ce015a84ac70effc5ed86
        Validity
            Not Before: Mar 26 00:01:36 2026 GMT
            Not After : Mar 27 00:01:36 2026 GMT
        Subject: CN=dd99dfef424d15bf2dcc2f8adefa5f409deeeab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:a3:af:67:80:2c:b7:4a:37:c9:ab:0c:96:
                    43:55:40:c5:3d:c1:14:b8:10:e4:a3:eb:33:d8:13:
                    7d:f8:e6:9e:f7:bb:bd:e0:55:8f:b0:96:ce:ec:76:
                    5b:15:e6:1c:e5:9a:78:66:8e:64:1d:d4:87:ad:8a:
                    7f:37:4c:7b:46:ce:2d:02:18:8d:0c:0b:34:04:b8:
                    93:b0:bf:05:c6:74:ac:33:af:9b:ce:8b:71:e4:8a:
                    4f:ad:30:d8:dc:55:c9:6b:cc:f8:8a:bc:a6:c4:5c:
                    f3:ee:ff:81:07:82:f6:c5:51:1e:b6:06:c7:e4:ba:
                    c3:b4:61:c6:33:24:d5:d5:e1:46:32:de:2a:d9:0c:
                    36:45:70:9b:6c:02:46:e2:eb:4d:9a:90:11:80:14:
                    e4:64:6f:36:5c:92:a1:be:d0:75:c1:81:f2:96:bc:
                    ca:57:31:7e:c2:73:df:67:98:77:12:02:b9:f3:fa:
                    be:af:46:4f:e0:4c:70:ef:17:78:0c:f3:b2:a9:e5:
                    cc:da:47:59:ea:4e:95:ed:cd:3d:df:06:a7:14:7e:
                    81:1e:f3:8f:98:e2:bf:84:e9:9b:10:b9:af:58:d6:
                    35:8a:4b:91:5f:c6:dc:60:74:6a:a3:28:33:8e:be:
                    e6:48:84:d4:cb:ff:bc:5b:81:df:19:89:fb:81:80:
                    0a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:99:DF:EF:42:4D:15:BF:2D:CC:2F:8A:DE:FA:5F:40:9D:EE:EA:B9
            X509v3 Authority Key Identifier:
                keyid:9F:A4:DE:72:1C:80:B2:C9:E7:6C:E0:15:A8:4A:C7:0E:FF:C5:ED:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3d:00:d4:49:50:d3:cd:b2:7e:dd:89:20:7e:65:22:e1:15:
         08:30:5f:c0:cf:98:5f:0e:71:7e:13:ef:da:60:d2:1d:23:fa:
         ca:8f:ca:02:18:bf:c9:7e:d3:38:ba:78:6b:cf:d2:0a:95:8b:
         5c:65:2d:5c:61:4c:b9:ae:3a:8c:28:d0:f5:3a:6c:ce:8d:3d:
         16:6f:70:cc:ea:0d:20:ce:37:c8:91:af:da:a8:fb:87:e5:b2:
         b2:bc:4c:89:ec:63:6a:4d:2b:4b:c7:f6:b9:2d:59:be:1d:f2:
         a6:e7:06:36:7c:ad:6f:5a:ee:62:b4:bb:84:1d:a7:ab:70:af:
         be:83:93:29:79:83:85:c6:aa:1c:8e:20:b4:e2:d2:d1:72:eb:
         e3:e5:62:59:4e:0f:f6:4f:50:e8:82:9b:a0:5a:1a:0a:aa:17:
         6d:1c:8e:4e:f7:42:20:61:b5:a5:9c:f8:71:e3:0c:77:74:3f:
         1d:2f:4a:66:6d:38:df:04:0c:b3:88:f2:07:5c:a4:e7:01:47:
         e4:65:e7:d9:3b:f1:1d:5d:0f:38:20:25:5d:fa:c3:6e:1b:cf:
         5b:a3:29:65:7a:60:59:fb:76:69:1f:e2:74:bc:26:00:1c:52:
         09:df:ee:c1:f5:60:3a:ef:dd:1c:e1:60:0b:20:3b:a3:fa:fc:
         3a:bd:7b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:10:04 2026 by rpki-client